The tasks for disabling GSSAPI auth were merged long ago, but the documentation was never written. This patch adds documentation for those tasks. Implements: blueprint security-rhel7-stig Change-Id: If41c5398d31849b4f8de1c8fc4969c1daf596a00
292 B
292 B
---id: RHEL-07-040660 status: implemented tag: sshd ---
The GSSAPIAuthentication setting is set to
no to meet the requirements of the STIG.
Deployers can opt out of this change by setting the following Ansible variable:
security_sshd_disallow_gssapi: no